The Google Cloud Security Community will be in read-only mode July 16 - July 22 as we migrate platforms. Read more and check out our FAQ.

[GCSCommunity]

Table of Contents

• Table of Contents
• Actions
• Cloud Compliance Standards

The Security Command Center Enterprise’s Compliance dashboard allows you to review your compliance with the security standards and monitors your compliance with detectors that are mapped to the controls of a wide variety of security standards. 

Actions

Cloud Compliance Standards

This powerful tool helps you monitor compliance with security standards and ensures alignment with controls to meet your regulatory requirements.

 

Show More

Steps

1. Users will see the Compliance dashboard with the following Cloud Compliance Standards at the top of the dashboard:
   1. Google Cloud
   2. Amazon Web Services
   3. Microsoft Azure
2. In each Cloud Compliance Standard, users will see displayed:
   1. Total Compliance Standards Count
   2. Findings Affect Compliance Count
3. Each Cloud Compliance Standard will have their own section with the Compliance Standard Count and a Details box for each Compliance Standard type listed, containing the following information:
   1. Name of Compliance Standard Type
   2. Passing Rate
   3. View Details link
4. The Compliance details page shows which controls are non-compliant, lists findings that describe the violations, and allow a compliance report to be exported.
5. Users will select a Date and Compliance Standard from the menus at the top of the page to get started.
6. Next to the Date Menu, users can select the Latest button to select the latest Date. 
7. Next to the Compliance Standard Menu, users can select the Export Report button to select Export a Report which will appear in the Downloads section of their page. 
8. In the next section users will see the selected Compliance Standard Control Over Time graph, to view the breakdown of their Controls by Compliance status. Users can adjust the time period to view the state of their controls over time, by selecting the Time Period.
9. In the next section, users will see a Filters options, that will show the following Filter options when selected:
   1. Control
   2. Status
   3. Rule
   4. Severity
   5. Findings count
10. Below the Filters option, users will see the Compliance Details list with the following columns:
    1. Control
    2. Status
    3. Rule
    4. Severity
    5. Findings count
11. To the left of each Compliance Details selection in the list is a Toggle Node. 
12. Each Compliance Details selection with a Toggle Node will display the Rule and Severity, when the Toggle Node is selected. 
13. Users can click any highlighted Rule link in the Compliance Details selection to view Compliance Details in the Google SCCE Cloud Platform’s Findings feature. This page will include Compliance Details Query Results. 
14. Examples of Google Cloud Compliance Standards available:
    1. CIS Controls 8.0
    2. CIS Google Cloud Platform Foundation 1.0
    3. CIS Google Cloud Platform Foundation 2.0
    4. CIS Kubernetes Benchmark 1.5.1
    5. Cloud Controls Matrix 4
    6. HIPAA
    7. ISO 27001 2022
    8. NIST 800-53 R4
    9. OWASP 2021
    10. PCI DSS 4.0
15. Examples of Amazon Web Services Compliance Standards available:
    1. CIS Amazon Web Services Foundations 2.0.0
    2. CIS Controls 8.0
    3. Cloud Controls Matrix 4
    4. HIPAA
    5. ISO 27001 2022
    6. NIST 800-53 R5
    7. NIST CSF 1.0
    8. PCI DSS 3.2.1
    9. PCI DSS 4.0
    10. SOC2 2017

Relevant Documentation Links

• [All Steps] https://cloud.google.com/security-command-center/docs/compliance-management

Next Step: Security Command Center Enterprise: Step 3 - Investigation Overview 

Previous Step: Security Command Center Enterprise: Step 2.3 - Visualization | Vulnerabilities